Cyber/Data Privacy Associate, Multiple US Locations · Vault Top 10 Firm

A Vault Top 10 firm's Cyber, Privacy & Data Innovation group advises global companies on designing privacy, cybersecurity, and AI compliance programs. The team handles regulatory compliance, transactional support, product counseling, and incident response across CCPA/CPRA, GDPR, HIPAA, GLBA, state privacy laws, and emerging AI governance frameworks. You'll work on client-facing compliance programs, contracts, transactions, and AI governance initiatives.

The work:

• Advise on compliance with major privacy and data protection frameworks (CCPA/CPRA, GDPR, HIPAA, GLBA, COPPA, BIPA, CAN-SPAM, TCPA)
• Negotiate privacy, security, and data-related terms in commercial contracts
• Support privacy and security components of corporate transactions
• Develop flexible AI governance frameworks and policies; counsel on responsible AI innovation
• Advise on self-regulatory programs (NIST, ISO, OECD AI risk management, PCI-DSS)
• Provide incident response and client counseling on emerging technology issues
• Work across multiple jurisdictions and client industries

What they're looking for:

• 3-5 years in privacy, cybersecurity, AI, or data protection at a law firm or in-house
• Proven ability to advise on major privacy and data protection frameworks
• Substantial experience negotiating privacy and data-related commercial terms
• Familiarity with AI regulatory developments and governance frameworks preferred
• Excellent drafting, negotiation, and analytical skills
• Proactive communication and project management ability
• Technology aptitude and understanding of digital advertising and emerging technologies
• Strong academic credentials; CIPP/US, CIPT, or AIGP certification a plus